Identity and Access Management

The University of Wisconsin System’s Identification, Authentication and Authorization (IAA) system provides identity management and authentication services supporting the secure deployment of applications at UW-System institutions. IAA identity and access management services for approved applications include access to data in the IAA Person Hub for user and account management, a federated authentication service (the Wisconsin Federation), and UW system-wide identity management.

To request UW System IAA data integration, please complete an Identity Data Integration request form.

Identity and Access Management Technical Advisory Group (IAM-TAG)

The Identity and Access Management Technical Advisory Committee (IAM-TAG) provides technical, operational, and policy recommendations to the IAM Steering Committee, CIO Council, IAM Support Team, and other key groups. The IAM-TAG comprises campus and UW System IAM engineering and support technologists, as well as technologists from key Common Systems service providers, including Libraries, Learning Management Systems, and administrative systems such as HRS.

The IAM-TAG guides the technical direction for the substantially rich and complex identity ecosystem for the UW System, and touches infrastructure across all UW System campuses. The IAM-TAG aims to facilitate interoperability between campuses and enable application owners to deploy applications securely and easily across large user populations.

The IAM-TAG works cooperatively among the various identity and service providers within the UW System, and identifies opportunities to leverage shared infrastructure or common practices to enable application owners and business units to securely and effectively deliver services to their customers

Integrating Applications with Universities of Wisconsin Identity and Access Management

Deploying applications securely to customers requires integration with various IT infrastructures. Authentication and authorization systems, data repositories, and other technical components must be integrated securely to enable applications to deliver services safely and reliably to customers.

Audience

Application Integrators, business process owners, and others providing IT services that require integration with campus or UW System IT infrastructure.

When to use

Campus service providers and application integrators should work with their local campus procurement and IT staff to determine what local campus standards or processes should be followed. These guidelines are offered as a default set of standards that can be used with vendors and integrators where specific campus standards do not exist.

While not all application procurement and deployment projects require a rigorous integration process, the IAM-TAG recommends that application integrators consult with local IAM staff or the UW System IAM Support Team (in addition to local procurement and IT security) before starting an application procurement. It is especially important to consult if the deployment meets any of the following characteristics:

  1. The application requires integrating with a campus or UW System authentication system.
  2. The application requires or collects identity data for UW System students, faculty, staff, or other customers,
  3. The application stores identity or other data generated by UW System students, faculty, staff, or others.